paper-compile

Pass

Audited by Gen Agent Trust Hub on Apr 19, 2026

Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it reads and evaluates content from external LaTeX source files and compilation logs. Ingestion points: Reads paper source files (.tex) and compile.log during error diagnosis and post-compilation checks. Boundary markers: Absent. The instructions do not specify how to handle instructions found within the LaTeX source. Capability inventory: Possesses full shell access (Bash(*)) and file system modification capabilities (Write, Edit). Sanitization: Absent. Content from logs and source files is directly analyzed to apply fixes.
  • [EXTERNAL_DOWNLOADS]: The skill suggests using tlmgr, apt-get, and brew to install LaTeX dependencies and system packages. These are official and well-known tools for environment management and do not represent a security risk when used as intended.
  • [COMMAND_EXECUTION]: The skill utilizes command-line utilities including latexmk, pdflatex, and pdftotext to perform compilation and document analysis tasks. It also executes a hardcoded Python script to process page counts, which is a standard procedure for this task.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 19, 2026, 03:14 AM